Can I turn off staged users?

[zogstrip]

I’m cool with adding a site setting to disable staged users, but what should we do when an email arrives with an unknown email address?

• Reject it?
• Quote it?
• Something else?